Skip to content

v2.1.0 (2016-12-22)

Latest
Compare
Choose a tag to compare
@kjg kjg released this 22 Dec 17:27
· 64 commits to master since this release
v2.1.0
4cff48b
  • Fixed a NoMethodError that might occur when using the NetHttp Driver (#130 grahamkenville)
  • More securely compare signatures in a way that prevents timing attacks (#56 leishman, #133 will0)
  • Remove support for MD2 and MD4 hashing algorithms since they are insecure (#134 will0)
  • Disallow requests that are too far in the future to limit the time available for a brute force signature guess (#119 fwininger)